CLSA-2026:1793118867

[CLSA-2026:1793118867] python: Fix of CVE-2025-4517

Type:

security

Severity:

Critical

Release date:

2026-10-27 16:34:38 UTC

Description:

- CVE-2025-4517: resolve tarfile extraction paths with strict ALLOW_MISSING
  realpath checks so an unresolvable link target cannot bypass destination
  containment

CVEs fixed:

CVE-2025-4517

Updated packages:

python-2.7.18-1.amzn2.0.22.tuxcare.els6.aarch64.rpm
sha:5727f2fb7e9fc1a257382708c7c02766edae727292be4614adac39248fe0e5ff
python-2.7.18-1.amzn2.0.22.tuxcare.els6.i686.rpm
sha:b18916b1b7d758c10b831bd15a5558ea03b6b583b3a26f8993fe9cf5b8bf9879
python-2.7.18-1.amzn2.0.22.tuxcare.els6.x86_64.rpm
sha:7557300e7433fadc035fe873ccf830c9bef149cb85340682f5d0c7ad1da6a280
python-debug-2.7.18-1.amzn2.0.22.tuxcare.els6.aarch64.rpm
sha:3408f5cafcf49b343883f52e85750d9be0f951300d64e1cdb06c524a5782aed1
python-debug-2.7.18-1.amzn2.0.22.tuxcare.els6.i686.rpm
sha:cf9952fb82edc8753e05b918b8e08ee5f40371a578323cdf09a7314c25e5e94b
python-debug-2.7.18-1.amzn2.0.22.tuxcare.els6.x86_64.rpm
sha:396e1fdae524c2a13938b7a1e2ad75d66fdd6ea2459dd2fa6a55ce7a4679ea9e
python-devel-2.7.18-1.amzn2.0.22.tuxcare.els6.aarch64.rpm
sha:a9be277daf56b0ee76782abd62ea807c4efbe7cd048c10de86d7bf3256cfbeb5
python-devel-2.7.18-1.amzn2.0.22.tuxcare.els6.i686.rpm
sha:2d10ccc877215d85698f925b87190d234b2152dc56befcee2c9065664c43fbc7
python-devel-2.7.18-1.amzn2.0.22.tuxcare.els6.x86_64.rpm
sha:8b67577dd7347b492cd2cf801772beac6d8dd09469609a505228c48e1c9db533
python-libs-2.7.18-1.amzn2.0.22.tuxcare.els6.aarch64.rpm
sha:8bb7236d431b47661434cf300c0114f6c5bd74b0d85d11023a8f1d512b0edbf1
python-libs-2.7.18-1.amzn2.0.22.tuxcare.els6.i686.rpm
sha:74dc9986f6e1cc29e9e2948df1d9e382bce8a570d9f991fbb75d8ee36df8e2d6
python-libs-2.7.18-1.amzn2.0.22.tuxcare.els6.x86_64.rpm
sha:b582d8a95502280b220b7ff541f452b8e4f70e87888fed4b1a369287b50ae6b9
python-test-2.7.18-1.amzn2.0.22.tuxcare.els6.aarch64.rpm
sha:8ef5a99c6c6e51202e1e4770eed232f43eb45aedf7bccce37529d559bd9c1d29
python-test-2.7.18-1.amzn2.0.22.tuxcare.els6.i686.rpm
sha:362dcd7e1dcf92e7eda136e40d71206510e65cdf6c47e5fc452a0621c105427f
python-test-2.7.18-1.amzn2.0.22.tuxcare.els6.x86_64.rpm
sha:307cbba7aa23fbec3aad347ff896c5706df41764852ddf49c579b19d08be2c14
python-tools-2.7.18-1.amzn2.0.22.tuxcare.els6.aarch64.rpm
sha:0fcf7a486bd9a0dabba5df150be625848f1e507c91ff3ee5d1d84133500f3043
python-tools-2.7.18-1.amzn2.0.22.tuxcare.els6.i686.rpm
sha:9cac04cb71e9d2357707eb385c8a4d194e3cd2744fe2ed4a0c6cc130be33c098
python-tools-2.7.18-1.amzn2.0.22.tuxcare.els6.x86_64.rpm
sha:35e342bdf232538d5be138ba402223eb711c076b9e9cab56d8558be22afb2e3a
tkinter-2.7.18-1.amzn2.0.22.tuxcare.els6.aarch64.rpm
sha:22fb2a2f20fdf7e0d1fb21fce07d6f2e9c6ceed632731876d2a81741f4b1db22
tkinter-2.7.18-1.amzn2.0.22.tuxcare.els6.i686.rpm
sha:507ce75a928840b70df61cc9c4cf51624b95a30fa5288f5394c1820acfebc5c7
tkinter-2.7.18-1.amzn2.0.22.tuxcare.els6.x86_64.rpm
sha:4fff961b8aac4b9e0f0baabde9ebf0c053c262a313f779bca0773394ba18b669

Notes:

This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.